Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: r1sjaIeVwaABAbRjdlvbUnt9kMjsDX0bcwKNwse9FUI=
Subject key identifier: AA:28:B3:CF:D8:D2:C8:67:58:67:C8:64:55:BB:EB:66:9F:E3:44:51
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0199FDD91C6051CC26632D6855C5A8BDD09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 15B6
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: VsV234mUsI3yAXDJNhzC8t79cyrBxlZM/AdXMkLAaXk=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1c:60:51:cc:26:63:2d:68:55:c5:a8:bd:d0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=aa28b3cfd8d2c8675867c86455bbeb669fe34451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:02:d8:cb:f2:bd:3f:55:f3:9e:1b:cd:cf:
f0:a9:64:8a:3a:9f:77:04:f1:58:ec:ad:86:73:b5:
ee:1c:56:15:1c:5a:8d:77:b6:3b:c2:0f:03:6a:67:
2c:87:a8:70:e3:74:3d:40:07:91:5c:13:2c:1d:55:
2a:42:c7:b8:7c:3d:80:d7:a9:08:1b:9f:13:28:bf:
60:d9:04:82:85:05:a7:3c:02:c1:e0:0a:fa:fb:b4:
3f:2d:e0:71:53:e9:3d:9a:a6:20:65:b6:79:07:6a:
44:37:d6:be:f1:f0:cf:80:1b:03:ea:c4:c9:46:44:
7c:29:47:e6:6d:af:d9:f6:2e:ee:2c:f6:f3:2f:7e:
ca:bc:59:ee:44:51:9a:cb:81:eb:69:3f:68:36:60:
59:ff:78:60:93:cc:fe:5f:23:d4:fa:f2:8e:34:5f:
f0:a0:80:cf:97:64:24:b2:86:9d:8f:fc:f0:cc:75:
92:d8:fc:1a:ac:bf:33:01:14:ef:78:43:f0:45:1d:
20:40:ba:14:54:12:63:6a:cf:51:81:b3:33:92:0a:
fb:d7:00:23:41:24:01:08:c7:d3:40:c1:55:c1:9c:
f1:53:8d:4e:d4:78:42:c3:6b:b4:52:40:8a:bb:fc:
f8:8f:72:45:dc:93:b0:19:fb:c7:2e:c8:30:3d:bf:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:B3:CF:D8:D2:C8:67:58:67:C8:64:55:BB:EB:66:9F:E3:44:51
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2d:5b:c4:3d:8c:b6:0f:7f:c8:37:59:b6:a7:27:10:30:b1:
53:a7:8b:f1:0b:79:94:59:0c:42:58:15:ef:c1:db:a1:cd:b2:
c0:eb:c0:98:e9:61:6b:3b:e8:f7:0f:cd:5b:bc:30:dc:20:83:
04:5c:a6:9f:06:31:94:f9:71:62:cb:64:f5:d8:de:37:5a:fe:
e6:5f:b8:7d:d4:f1:df:d1:11:cd:98:20:05:cc:3e:83:c0:f5:
97:c9:22:db:12:97:bb:08:64:40:a1:63:9e:bc:7e:65:59:8a:
ac:2b:ed:65:32:ff:69:d9:0b:38:9e:e3:e9:8c:34:11:c5:38:
97:f5:b3:f0:8a:60:76:72:7b:5c:27:20:2e:7e:55:f3:68:4a:
22:53:28:5a:d5:71:8b:8d:4c:53:f0:e4:60:aa:ba:98:55:7b:
d1:1c:a3:cd:a7:fa:97:25:11:82:df:10:31:d6:c0:fc:0b:6a:
9a:cb:17:dc:10:74:e9:8e:0e:51:be:25:5c:5c:0f:57:7b:7c:
09:0e:14:b9:7e:03:87:25:b6:37:ef:48:39:55:25:13:56:30:
14:c7:78:8c:6c:6a:31:08:a7:2c:96:7b:e3:03:0d:11:56:67:
57:58:2b:c1:cb:11:c7:27:4b:0a:80:71:10:a8:30:47:69:19:
2c:e7:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:15 2025 by rpki-client